Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b3f6ef-4739-30e1-80bb-ca2ccb45a88b.roa
File:                     e9b3f6ef-4739-30e1-80bb-ca2ccb45a88b.roa (raw, json)
Hash identifier:          30DTc/I8vYYOJl0hVb+qEABuhnXs9Ggu/ZCl+/6kkrc=
Subject key identifier:   B1:BF:B7:11:64:D5:EA:A0:52:E9:B2:96:FF:26:ED:CD:19:20:D6:D2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9D4CE6AEF58531AFBDB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b3f6ef-4739-30e1-80bb-ca2ccb45a88b.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33287
IP address blocks:        2001:559:c304::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:d4:ce:6a:ef:58:53:1a:fb:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=603e7031-ed99-421b-b828-5aba304af55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:7b:95:d1:4c:f9:4a:69:05:63:a0:5d:90:
                    7a:26:6a:91:7f:53:52:8b:40:b5:b3:ab:76:da:63:
                    b6:49:20:cc:07:be:2b:cd:14:83:b2:d4:60:bd:97:
                    6a:99:08:f8:fc:4c:9e:93:91:f1:71:33:a2:e1:ee:
                    95:a8:3a:86:78:77:e1:34:fa:49:84:e8:e4:5b:ae:
                    aa:ab:27:a2:9e:48:1f:fa:34:27:4f:b1:a6:f4:ee:
                    12:f7:aa:9e:43:6d:54:96:c4:c2:ab:24:d9:af:6f:
                    bb:eb:d1:f2:5e:e6:5c:11:7f:97:89:9d:65:0d:c2:
                    e9:a5:62:77:dc:00:5b:89:fe:0a:e7:46:ad:f0:d4:
                    b4:a0:3f:e6:7b:c0:07:8d:11:33:57:a0:fa:f7:97:
                    2d:b6:e3:e3:3f:17:6b:95:f9:ea:5e:e1:81:71:14:
                    2c:09:df:b9:fc:a9:c1:50:49:76:64:f5:f6:55:6f:
                    ea:94:ff:78:b4:c3:46:3c:59:ab:db:32:4c:44:80:
                    66:4b:dd:3f:bc:57:6f:7e:12:6c:67:b9:50:3f:f1:
                    b4:00:66:77:87:79:6f:8c:6e:a8:b7:37:04:ef:4b:
                    7c:46:13:c5:10:f7:63:ad:4c:f7:94:cd:28:27:5c:
                    b1:e6:ba:49:da:66:f1:ac:d9:32:e4:38:05:33:f2:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BF:B7:11:64:D5:EA:A0:52:E9:B2:96:FF:26:ED:CD:19:20:D6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9b3f6ef-4739-30e1-80bb-ca2ccb45a88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c304::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e6:4e:ba:c0:63:c7:86:42:7c:92:69:9a:57:27:79:9c:9a:
         eb:e8:12:79:cc:c4:94:7b:40:7f:11:a9:90:77:df:4d:9c:d7:
         ea:0e:40:48:f6:70:11:6f:27:d2:7f:ed:3a:db:cb:33:58:91:
         65:cc:fc:ce:a9:7b:43:a9:fc:b5:45:3d:d4:44:0c:a8:91:dd:
         fb:f8:be:a6:f4:42:33:43:10:bf:b0:f8:cc:bb:3f:7d:60:02:
         32:d1:4a:50:72:ef:70:7c:19:af:6d:a3:15:cd:3e:00:5f:60:
         dd:4f:05:5f:e1:10:4e:29:66:da:c6:7f:d2:23:a7:56:0e:45:
         c3:8a:00:17:0b:fd:15:2c:5b:ab:89:f4:fb:9f:a6:93:e6:fd:
         dd:26:ce:02:b8:95:32:a6:7b:ca:4a:97:ca:c7:f2:07:94:f1:
         d9:49:fc:19:20:85:c7:3a:d5:07:5f:1d:e4:d5:ad:a7:6e:cf:
         b4:d4:c4:f4:94:86:83:e9:91:bd:58:38:75:4c:aa:cf:81:75:
         d3:85:ef:1a:6e:c8:78:78:9e:f7:e4:d5:c4:ce:ec:77:fb:83:
         7e:7a:00:7d:c7:00:46:49:fe:bd:1c:79:aa:0a:0f:6a:3c:63:
         e3:f9:67:c0:70:eb:63:78:5e:0c:fc:1f:16:9a:80:6f:ce:7d:
         e8:79:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:33 2025 by rpki-client